http://blog.readytomanage.com/how-do-you-manage-or-mitigate-risk/